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REMARKS 

ClatTtis 1-21 are pendixig in the present application. Reconsideration of the claims is 
respectfully requested. 



L 35_U,S.C,jS 103. Obviousness 

The examiner has rejected clainjs 1, 2, 4, 5, 1 0-12, 14, 1 5, 20 and 21 under 35 
US.C. § 103(a) as being unpatentable over Banga et al. (5,931,904) 'Method jfbr 
reducing the delay between the time a data page is requested and the time the data page is 
displayed' in view of Cuccia et al. (6,151,676) ^Administration and utilization of secret 
fresh random numbers in a networked environment. This rejection is respectfully 
traversed. 

As per claims 1, 2, 4, 5, 10-12, 14, 15, 20 and 21, the office action states: 

As per claims 1, 2, 5, 1 1, 12, 15, 21 Banga teaches the use of a 
remotely located cache storage site 151. A session is initiated and the user 
1 1 requests a page. The web site is received by user 1 1 and then cached 
by the remote proxy 151 (col 3 lines 29-65). Banga also teaches that the 
cache data can be stored at a remote site (element 151 and col 3 lines 29- 
45). 

The applicant argues that the cited references do not ^describe 
encryption and caching of a received web page'. In view of this 
remark, what is disclosed by Banga is the receiving of a web page and 
storing a particular version of a cached page at a remote site. Arguments 
are found to be non-pervasive, (col. 3 lines 29-65) (Tirst, the remote 
proxy cache at least one version of the page (if the page requested by the 
user has never been requested by any user connected to the remote proxy, 
Uiere would be no alternative to waiting for the full current page to be 
received at the remote proxy and sending the entire page, except that it 
may be possible to begin sending the entire current page before it is 
completely received at the remote proxy).') Banga doe not teach the use 
of encrypting the web page. 

Cuccia teaches the use of a browser supported encryption 
algorithm. Cuccia teaches that the El-Gamal is an encryption algorithm, 
which is supported by a browser (col 6 lines 13-29), Cuccia teaches that 
the El-Gamal algorithm encrypts the date (web page) to ensure the 
integrity of the data (col 5 lines 4-61, col 8 lines 13-37). This technology, 
which uses public key encryption, is incorporated into the web browser. 
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Also it discloses on selecting the browser which is supported by El-Ganjal 
(col 6 lines 13-29). 

AppUcai)! argues that the reference do not teach 'encrypting a 
web page' in view of this, what is disclosed by Cuccia clearly suggests the 
encryption of a web page. Arguments are found to be non-pervasive, 
(col. 5 lines 4-61, col. 8 lines 13-37) ("The operation of the networked 
system 10 in providing a secret fresh random number Rl and encrypted 
private key KprUset to the user in the course of a phase in the nature of a 
challenge response protocol, which after completion of this phase, are 
used for a digital signature employing the El-Gamal algorithm of a 
document S[KprUser, R1](D0C)) which is derived from, or the same as, a 
then supplied document, will be best understood by also referring to FIG. 
2/) (Tor the purpose of this Figure, it is assumed that the user has already 
requested access to the document system (home page) and the server 16 
has sent a sign-in page to the user equipment 12. Thereafter al step 30, the 
user enters his ID in the sign-in page via input means 12a, e.g, the initials 
of the user^ providing the Ids of all users are unique, and at step 40 the 
sing-in page including the entered ED is transmitted to the server, which 
receives it at step 70.') The use of encrypted private keys and the El- 
Gamal algorithm on the document (web page) is clearly shown by Cuccia. 
In addition on page 16 of arguments applicant states certain 
limitations are not meant by references HOWEVER these limitations 
are not stated in the claims. Arguments are found to be non- 
pervasive. 

Therefore the Banga/Cuccia combination would disclose 
encrypting the web page and coding the web page using a browser 
supported encryption algorithm. It would be obvious to one skilled int he 
art to add the art to the use of the El-Gamal algorithm to Banga to ensure 
documents (web page) are secure (col 1 lines 14-62). For this reason as 
well as the reasons stated above the combination of Banga and Cuccia 
clearly meet the limitations of the claims therein. 

Claims 1, 2, 5, 11, 12, 15, 21 are rejected. 



ANALYSIS 

Examiner rejects several claims over Banga in view of Cuccia. Claim 1 is 
reproduced for purposes of discussion. 



1 , (Original) A data processing implemented method for securing infomiation 
stored in a browser cache associated with a browser, the method comprising: 

initiating a session; 

requesting a first web page; 
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receiving the web page; 
encrypting the web page; and 
caching the web page. 

Applicant respectfully submits that the combined references fail to teach the 
limitations of claim L 

Examiner addresses Applicant's arguments from previous correspondence with 
respect to these cited references at page 4 of the current office action, stating, 

In addition on page 16 of arguments applicant states certain limitations are not 
meant by references HOWEVER these limitations are not stated in the claims. 
Arguments are found to be non-persua$ive. 

Applicant respectfully submits that the arguments to which Examiner refers were 
intended to show that th^e is no motivation to combine the cited references in the 
manner proposed by Examiner. 

For example^ neither cited reference teaches or suggests encrypting and caching a 
web page. Examiner states that "Banga does not teach or suggest the use of encrypting 
the web page." [See p. 3 of the current office action.] Examiner seeks to cure this 
deficiency by adding the teaching of Cuccia. 

However, Cuccia does not teach the claimed steps of receiving, encrypting, and 
caching a web page, as claimed in at least claim 1 . As argued further below, Cuccia deals 
with an encryption package for transmitting fresh and secure public keys. Cuccia is 
essentially an authentication and verification system. There is no motive stated or 
suggested to modify Cuccia in the way proposed by Examiner. 

Cuccia never mentions that the encryption is applied to web pages that are cached 
In factj Cuccia expUcitly teaches that the encryption is applied to a specific package, and 
the contents of this package are described at col. 8, lines 37-59: 

The items obtained in steps 72 and 74 are used in step 76 using hacking means 
16c and El-Gamal algorithm means I6d to form a package of items which is then 
transmitted to user equipment 12 via network 14. The package consists of: 
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a) a first encrypted component El read in step 72 which as aforementioned 
has previously been formed by encrypting the private key of the user 
KprUser using the user's identifying key Kpass.,. 

b) a second encrypted component E2 which is formed by the server 
encrypting together random numbers Rl and R2 employing the El-Gamal 
algorithm using the public key of the user .... 

c) freshness value FR; and 

d) a first signature SI of a hashing together of the first and second random 
numbers Rl and .R2 , and the freshness value FR, which signature employs 
the El-Gamal algorithm using the private keys of the server.... 

Thus, Applicant respectfully submits that the package of Cxjccia does not include 
encryption of web pages, nor does Cuccia teach or suggest encryption and caching of 
web pages. Instead, Cuccia deals with a specific authentication and verification system,, 
using an encryption algorithm to encrypt random numbers and user IDs, etc. 

Tbe teaching of an encryption program (e.g., Caccia's El-^^anial encryption 
algorithm) does not make obvious all uses of encryption. In the present case, 
Examiner seeks to combine Banga's teaching of downloading web pages with Cuccia's 
instruction on encrypting public keys- However, neither Cuccia nor Banga teaches or 
suggests that web pages are to be encrypted before being cached. 

A fimdamental notion of patent law is the concept that invention lies in the new 
combination of old elements. Therefore, a rule that every invention could be rejected as 
obvious by merely locating each element of the invention in the prior art and combining 
the references to formulate an obviousness rejection is inconsistent with the very nature 
of "invention." Consequently, a rule exists that a combination of references made to 
establish a prima facie case of obviousness must be supported by some teaching, 
suggestion, or incentive contained ia the prior art which would have led one of ordinary 
skill in the art to make the claimed invention. The inquiry is not whether each element 
existed in the prior art, but whether the invention as a whole is obvious in light of the 
prior art. Hartness International Inc, v. SimpUmatic Engineering Co., 819 F.2d 100, 2 
U.S.P,Q.2d 1826 (Fed. Cir. 1987). 

.In the present case. Examiner cites Cuccia as teaching an encryption algorithm 
which is supported by a browser at col. 6, lines 13-29: 
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Referring to FIG, I of the drawing, there is shown a networked system 10 
comprised of a plurality of computer station, terminals, or other computing and/or 
communication equipment 12 and a server 16 interconnected or capable of 
communicating via a wired or wireless network 14. A store 18 which may be or 
include RAM, ROM, a hard disk or other memory or media, is coupled to or 
forms part of server 16, and contains respective sections 1 8a-e, or fields in a data 
structure, for storing user IDs, encrypted private keys, public key$, documents, 
and digital signatures, respectively, for all users, which are indexed or otherwise 
addressable or retrievable by BD. J^stetworked systenij XQ may take a variety of 
forms but is preferably an intranet, the network 14 sui>pQrting TCP/IP, the user 
equipment_12 employing web browsers, and the server 16 acting as a web a 
server , 

[Emphasis added.] 

Though this passage describes encrypted private and public keys, documents, and 
digital signatures, it does not describe encryption and caching of received web pages. The 
browser is only mentioned in passing, and nothing of encrypting cached web pages is 
found in the citation. Examiner also cites Cuccia as teachuig the encryption of web pages 
at col 5, lines 4-61 and col. 8, lines 13-37. However, it is respectfully submitted that 
these passages do not teach or suggest encryption and caching of received web pages as 
claimed in Claim L The passages of col. 5 discuss the objects of the invention, which 
include administrati on of secret fresh random numbers in a network environment. The 
passages of col. 8 also describe the operation of the network **in providing a secret fresh 
random number Rl and encrypted private key KprUser to a user in the course of a phase 
in the nature of a challenge response protocol, which after completion of this phase, are 
used for a digital signature employing the El-Gamal algorithm of a document..." [Col. 8, 
lines 13-18.] 

These passages deal with encryption and handling of private keys as part of 
digital signature protocols. They are not directed to encryption and caching of web pages, 
as claimed in at least claim 1 of the present application. If Applicant has overlooked a 
relevant teaching, it is respectfully submitted that such teaching be pointed out with 
particularity. 

In determining obviousness, an applicant's teachings may not be read into the prior 
art. Pcmduit Corp, v. Denison MJg, Co,, 810 F2d 1561, 1575 n. 29, 1 U.S.P.Q. 1593, 1602 
n. 29 (Fed. Cir. 1987) (citing need to "guard against hindsight and the temptation to read 
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the inventor's teachings into the prior art"), A determination of the desirability of 
combining prior art references must be made witiiout the benefit of hindsight afforded by 
an appUcant's disclosure. Jn re Paulsen, 30 F.3d 1475, 1482, 3 1 US J.Q. 1671 , 1676 (Fed. 
Cir. 1994). 

The present invention recognizes the problem of sensitive data being cached by a 
web browser, and thus creating a breakdown in security. Neither the Banga nor the 
Cuccia reference teaches this problem or its source, and do not address this specific issue. 
Instead, Banga is directed toward reducing delay between requesting and displaying a 
data page, while Cuccia is directed toward refreshing and maintaining and administering 
secret random numbers in a networked environment See, e,g,, col, 5, lines 48-62 of 
Cuccia: 

It should be understood that while the present invention is discussed hereinafter 
in tenns of an exen^ilary system and method for obtaining digitally signed 
documents of a plurality of users in a networked environment which have been 
signed employing the El-Gamal algorithm, the principles of the present in vention 
are equally applicable to distribution of secret fresh random numbers, and/or to 
distribution of a combination of a secret fresh random number and an encrypted 
private key, for other purpose. Further, when used for digital signatures, it should 
be appreciated that such signatures may be applied to a variety of data, files, 
programs, or other "documents", whether originated* modified, or reviewed by 
xisers. In. any event, the digital signature may be thought of as manifesting 
approval by the user of a document 

The present specification states the issues addressed by the present invention at 
pages 18-19: 

Another problem is that of sensitive data being cached by a web browser, 
and this problem remains an issue with current browser technologies. Users often 
request sensitive or private information from web sites. With the advent of more 
secure encryption means, the Internet is quickly becoming the distributed network 
of choice for financial institutions, government agencies, and professional groups. 
As a user accesses a web site that provides sensitive data, the user generally must 
present valid user identification and a password before being granted access to the 
requested data. The data is then usually encrypted and sent to the user's browser. 
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Whcq the i:equeste4 page is Ipaded pnto the.u?ei:^s cpmputer by the 
browser, a breakdown in security occurs. T his happens because the requested 
data which was handled as privileged data by the web server is now treated as any 
other data bv the web browser, without regard to its sensitive nature. Sensitive 
data, or rated data, is given no more consideration bv the web browser than any 
other type of data. Therefore, anyone having access to the user's browser may 
access the entire contents of the browser's cache.. Any sensitive, important, rated, 
business or technical data stored in_the browser cache may be accessed without 
user or password identification. 

The problem becomes even more acute for network PCs that have little 
onboard memory and/or no disk memory, necessitatiag the allocati on of browser 
cache jfrom server memory. Anyone with access to the server may also have 
access to the user's browser cache store on the server. 

The present inventi on addresses this concern, which is not addressed by eiflicr 
cited reference. Further, combining the proposed references Banga and Cuccia would not 
form the present invention. Banga is directed to reducing delay time between requesting 
and displaying a data page, while Cuccia is directed to management of secret fresh (i.e., 
up to date) random numbers used for authentication. Neither reference describes a 
process by which a web page is received, encrypted^ and cached, as claimed. 

For these reasons, it is respectfully submitted that claims 1, 2, 5, U, 12, 15, and 
21 are distinguished from the cited references. 

Examiner also rejects claims 10 and 20 over the Banga/Cuccia combination. 
Claim 10 is reproduced for reference: 

10. A data processing implemented method for securing infonnation stored in 
a browser cache associated with a browser, the method comprising: 
initiating a session; 

decrypting data contained in the browser cache, wherein the decrypted 
data is associated with information content stored in the browser cache; 
requesting information stored in the browser cache; 
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checking the decrypted data for requested informatioiL; and 
decrypting additional data contained in the browser cache* wherein the 
decrypted data is the requested information. 

The Examiner rejects this claim stating, 

..,Banga does not teach the use of encrypting/decrypting the web page, Cuccia 
teaches the use of a browser supported encryption algorithm. Cuccia teaches that 
the El-Gamal is an encryption algorithm, which is supported by a browser (col. 6, 
Unes 13-29). Cuccia teaches that the_El-Gamal algorithm encrypts the data (web 
page) to ensure the integrity of the data fcoK 5, lines 4-61, col. 8, lines l3-37)..„ 
[Emphasis added.[ 

Applicant respectfully disagrees with this characterization of Cuccia, particularly the 
statement that "Cuccia teaches that the El-Gamal algorithm encrypts the data (web page) 
to ensure the integrity of the data,.*." 

Applicant respectfully submits that Cuccia does not teach encrypting a web page. 
Cuccia teaches encrypting public keys and random numbers, and other parts of a 
"package*' sent to a user for authentication and verification. Neither cited passage 
presented by Examiner teaches encrypting a web page or encryption and caching of a 
web page. For example, coK 5 states at lines 48-62: 

It should be understood that while the present invention is discussed hereinafter in 
terms of an exemplary system and method for obtaining digitally signed 
documents of a plurality of users in a networked environment which have been 
signed employing the El-Gamal algorithm, the principles of the present invention 
are equally apphcable to distribution of secret fresh random numbers^ and /or to 
distribution of a combination of a secret fresh random, number and an encrypted 
private key, for other purposed. Further, when used for digital signatures, it 
should be appreciated that such signatures may be applied to a variety of data, 
files, programs or other "documents", whether originated, modified, or reviewed 
by others. In any event, the digital signature may be thoug^it of as manifesting an 
approval by the user of a document. 
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Though this passage mentions "documents " it refers to them because the encrypted 
signatures (which are the main subject of Cuccia) may be appended to doctunents in 
order to authenticate them. 

Further, neither Cuccia nor Banga teaches all limitations of claim 10. For 
example, claim tO includes the following emphasized limitations, 

10. A data processing implemented method for securing infomiation stored in 
a browser cache associated with a browser, the method comprising: 
initiating a session; 

decrypting data contained in the browser cache, wherein the decrypted 
data is associated with infnrmation content stored in the browser cache : 

requesting information stored in the. browser cache; 

checking the decrypted data for requested information; and 

decrypting additional data contained in the browser cache, whereinthe 
decrypted data is the requested information . 

[Emphasis added.] 

Note that claim 10 includes two different date: first, there is the data "associated with 
information content stored in the browser cache," as well as "additional data contained in 
the browser cache, wherein the decrypted data is the requested information.** Examiner 
does not appear to make this distinction in rejecting claims 10, etc. Examiner only states, 

Cuccia teaches the use of a browser supported encryption algorithm, Cuccia 
teaches that the El-Gamal is an encryption algorithm, which is supported by a 
browser.... Cuccia teaches that the El-Gamal algorithm encrypts the data (web 
page) to ensure the integrity of the data.... This technology, which uses public key 
encryption, is incorporated into the web browser. Also it discloses selecting the 
browser which is supported by El-Gamal.... It would be obvious to one skilled in 
the art to add the art to add the use of the El-Gamal algorithm to Banga to ensure 
documents (web pages) are secure.... Therefore, Banga/Cuccia combination 
would disclose encrypting and decrypting data associated with the browser. 
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Thus Applicant respectfiilly submits that Examiner rqects claim 10 without pointing to 
all claimed elements of claim 10. It is therefore respectfully submitted that claim 10 is 
distinguished from the cited references. 

Independent claims 9 and 19 are rejected over Schiader and Banga. Claims 9 and 
1 9 also tnclude limitations directed to encrypting cached information using a browser. 
Examiner cites Schrader at col 1 3, lines 45-60 as teaching the use of opening and using 
an application with a browser, and coL 8 lines 25-51 as teaching a browser opening an 
application specific function. Examiner also cites Schrader as encrypting the s^lication 
specific information at col. 17, lines 12-30, which state in part: 

To provide security, the personal online finance application 304 provides for user 
authentication during banlctng transactions, and file encryption of transmitted data 
and instructions. The request file is preferably encrypted using RSA™ 1024 bit 
triple DES encryption. The request file is encrypted with the public key of the 
receiving financial institution^ and then transmitted to the financial institution 
computer system 305. The financial institution computer system 305 receives and 
decrypts the request file using a private key held by the financial institution. 

The financial institution computer system 305 creates a response file that contains 
the set of transactions that have been cleared for or at the financial institution 
since the date 164 of the last update of the online statement 150. This response 
file is then encrypted with the financial institution's private key and sent back to 
the personal online finance plication 304. During this time, the transmission 
status is constantly available to the user* The user may abort a transmission if 
necessary. 

It is noted that Schrader does not teach or suggest the encryption and caching of a 
received web page, as claimed. Examiner states that Schrader "does not teach the use of 
caching of the application specific inform ation." Examiner seeks to correct this 
deficiency by reference to Banga, which Examiner cites as teaching the caching of 
information at a location (see col. 3, lines 29-45). Examiner proposes the combination of 
elem ents from two references. However, neither of the cited references teaches or 
suggests all claim limitations of claims 9 and 19, nor do they address the problem 
addressed by the current application. The current application states at pages 18-19, cited 
above, discussing the security breakdown of caching unencrypted sensitive data. 
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In fact, Scbrader deals with sensitive transactions over a communication network, 
and mentions encryption of such transactions, but noticeably excludes any mention of 
maintaining encryption of such, data that is cached. Particularly, Schradeor states at col. 17, 
lines 32-40: 

On successful receipt of the response file by the personal online finance 
application 304, the application first decrypts the response file with the financial 
institution's public key and then processes the contents. This processing includes 
extracting each of the cleared transactions fiom the response file and storing them 
in the transaction database via the database module 1407. Each of these 
transactions is marked in the transaction database as being imreconciled, and as 
part of the online statement 150. 

[Emphasis added,] 

This passage explicitly states decryption of the received data, indicating Schrader 
was aware of the desire for encryption, but fails to describe encryption of cached data, 
which is available to anyone who can access the user's browser (either remotely or 
locally) or even anyone who can access the server serving the user's machine, if server 
cache is used. Instead, Schrader* s teaching is limited to encryption of the data during 
transmission, then it explicitly teaches decrypting that data for use without any mention 
of encrypting cached sensitive data. Hence, by addressing only encryption of 
transmission and explicitly teaching decryption upon receipt, Schrader effectively teaches 
away from the presently claimed invention. One of ordinary skill in the art, upon reading 
Schrader' s directions for encrypting sensitive data for transmission and decrypting it 
upon receipt, would not be motivated to practice the present invention as claimed in 
claim 9, which includes producing data, encrypting the data, then caching the encrypted 
data. 

It is respectfully submitted that since neither reference addresses the issue of 
encrypting then caching information, one of ordinary skill in the art would not have been 
motivated to create the present invention by reference to the Banga and Schrader 
references. In determining obviousness, an applicant's teachings may not be read into the 
prior art. Panduit Corp. v. Denison Mfg. Co., 810 F.2d 1561, 1575 n. 29, 1 U.S.P.Q. 1593, 
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1602 n. 29 (Fed. Cir. 1987) (citing need to "guard against hindsi^t and the temptation to 
read the inventor's teachings into the prior art"). 

Hence, the rejection of independent claims 9 and 19 is believed overcome* 
Several dependent claims are also deemed distinguishable from the cited references. 
For example, claims 8 and 1 8 are rejected over the Banga/Cuccia combination, further in 
view of the Olson reference. However, it is respectfully submitted that the combined 
teachings of Banga, Cuccia, and Olson do not teach or suggest the claimed limitations of 
claims 8 and 18. Examiner cites Olsen as teaching storing a web page cache in a paged 
manner (coL 4, lines 46-56): 

By allowing the cache memory 16 to access the main memories 1 8 in a paged 
manner, cache memory efficiency, i.e., the hit ration or the percentage of time th^ 
the required data is located in the cache memory, is improved. » 

Though Olson discusses paging, it does not describe that a web page that is cached and 
then paged is paged as encrypted web page information. Olsen is not directed to encryption 
or data or security* It is directed to increasing cache hit speed by accessing both cache 
memory and main manory simultaneously. The Olsen Abstract states: 

Rather than sequentially accessing the cache memory to determine if the next 
instruction is stored therein and then accessing the main memory if the cache 
m«nory does not have the next instruction, system operating speed is increased by 
simultaneously accessing the cache and main memories. 

Hence, Olsen does not teach or suggest that the cached and paged memory is paged as 
encrypted data. To the contrary, encrypting the paged data would be counter to Olsen' s 
stated intent of increasing speed of data access, since the data might need to be decrypted 
before use. Such teaching is inconsistent with Olsen's solution to the problem of slow 
cache hits. Hence, it is respectfiiUy submitted that one of ordinary skiU in the ait would not 
be motivated to encrypt cached and paged infomiation by the teaching of Olsen. 

The deficiencies of Banga and Cuccia have been discussed previously in this reply, 
with ref^cnce to claim 1, fiom which claim 8 depends. Therefore it is respectfully 
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submitted that the combination of Banga and Cuccia with Olson fails to teach or suggest all 
cjaixned limitalions of claims 8 and 18. 

Therefore, the rejectioti of all claims under 35 U-S.C. § 103 has been overcome, 

IL ConclDsion 

It is respectfully urged that the subject application is patentable over the cited 
references and is now in condition for allowance. 

The Examiner is invited to call the undersigned al the below-listed telephone 
number if in the opinion of the Examiner such a telephone conferrace would expedite or 
aid the prosecution and examination of this application. 

DATE: ^.(1'-^'> 

Respectfully submitted. 



Patrick C. R. Holmes 
Reg. No. 46,380 
Carstens, Yee & Cahoon, LLP 
P.O. Box 802334 
DaUas, TX 75380 
(972) 367-2001 
Attorney for Applicants 
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